CVE-2026-77237— Missing type validation in xQueueAddToSet in FreeRTOS-Kernel
Possible ATT&CK Techniques 2AI
T1055 · Process Injection T1068 · Exploitation for Privilege EscalationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| FreeRTOS | FreeRTOS-Kernel | 7.4.0≤ 11.3.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-77237
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing type validation in xQueueAddToSet in FreeRTOS-Kernel
Source: CVE Program / CVE List V5
Vulnerability Description
Missing queue-set type validation in xQueueAddToSet() in the FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports with configUSE_QUEUE_SETS=1 to read privileged kernel memory. To remediate this issue, users should upgrade to version 11.3.1 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用不兼容类型访问资源(类型混淆)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| FreeRTOS | FreeRTOS-Kernel | 7.4.0 ~ 11.3.0 | - |
II. Public POCs for CVE-2026-77237
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-77237
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-77237 (2)
Vendor Pages for CVE-2026-77237 (1)
Other References for CVE-2026-77237 (1)
Same Patch Batch · FreeRTOS · 2026-08-21 · 4 CVEs total
| CVE-2026-77234 | 8.8 HIGH | Improper input validation in FreeRTOS-Kernel timer command handling |
| CVE-2026-77236 | 7.3 HIGH | Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel |
| CVE-2026-77235 | 7.3 HIGH | Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel |
IV. Related Vulnerabilities
Same product: FreeRTOS-Kernel
Same vendor: FreeRTOS
- CVE-2026-77236
Missing size validation in SecureContext_AllocateContext in - CVE-2026-77235
Missing privilege check in SecureContext_FreeContext in Free - CVE-2026-77234
Improper input validation in FreeRTOS-Kernel timer command h - CVE-2026-8686
DoS from MQTT v5.0 Deserialization Fault in core MQTT - CVE-2024-38373
FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser
V. Comments for CVE-2026-77237
No comments yet